Design/Logic Flaw

2014-12-1215:59:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.079 Low

EPSS

Percentile

94.1%

JSON

The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted (1) offset or (2) length value in savevm data.

CPENameOperatorVersion
qemule2.1.3
enterprise_linux_desktopeq7.0
enterprise_linux_euseq7.3
enterprise_linux_euseq7.4
enterprise_linux_euseq7.5
enterprise_linux_euseq7.6
enterprise_linux_euseq7.7
enterprise_linux_servereq7.0
enterprise_linux_server_auseq7.3
enterprise_linux_server_auseq7.4

Name	Operator	Version
qemu	le	2.1.3
enterprise_linux_desktop	eq	7.0
enterprise_linux_eus	eq	7.3
enterprise_linux_eus	eq	7.4
enterprise_linux_eus	eq	7.5
enterprise_linux_eus	eq	7.6
enterprise_linux_eus	eq	7.7
enterprise_linux_server	eq	7.0
enterprise_linux_server_aus	eq	7.3
enterprise_linux_server_aus	eq	7.4